Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
File: 2nVBcltyi1qJ87-vIPh2VWPC8_s.mft (raw, json)
Hash identifier: S/LZF93m0nYlZ3zcRECwq2ZYVDreTl2D3JjD5coULK4=
Subject key identifier: 39:A3:C7:B4:A0:D5:45:90:EC:D6:DD:83:E1:FE:3B:B9:73:24:8D:D2
Authority key identifier: DA:75:41:72:5B:72:8B:5A:89:F3:BF:AF:20:F8:76:55:63:C2:F3:FB
Certificate issuer: /CN=da7541725b728b5a89f3bfaf20f8765563c2f3fb
Certificate serial: 019F19437A9D6BDFC98D3B07C5C2155406F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
Manifest number: 1984
Signing time: Tue 30 Jun 2026 16:01:20 +0000
Manifest this update: Tue 30 Jun 2026 16:01:20 +0000
Manifest next update: Wed 01 Jul 2026 16:01:20 +0000
Files and hashes: 1: 2nVBcltyi1qJ87-vIPh2VWPC8_s.crl (hash: GJdKJ+fRx+reYrqbnikXZIc/8PTeeRpEoDQBS30e/pA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:7a:9d:6b:df:c9:8d:3b:07:c5:c2:15:54:06:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7541725b728b5a89f3bfaf20f8765563c2f3fb
Validity
Not Before: Jun 30 16:01:20 2026 GMT
Not After : Jul 1 16:01:20 2026 GMT
Subject: CN=39a3c7b4a0d54590ecd6dd83e1fe3bb973248dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c9:04:1a:20:65:70:20:43:f7:fc:09:b2:8c:
21:ec:2c:b6:ca:09:a0:93:be:67:b9:d3:c8:8a:e4:
93:95:53:72:cd:61:f9:33:bc:f3:4a:bc:78:20:97:
d5:ee:e2:9f:38:20:b8:01:db:68:3c:54:27:73:3f:
69:9b:e1:a6:fb:67:d5:ff:18:9d:a2:51:18:8f:fb:
ec:1f:cd:94:39:7c:40:47:d0:a1:93:fd:fa:ac:0e:
d3:a0:36:7d:3d:cf:4a:55:e6:39:31:31:f4:13:81:
3e:47:7c:06:d7:fc:e7:36:cb:56:51:7f:5b:2a:bb:
bf:af:e7:8e:7f:05:14:09:49:f8:61:ec:a3:08:ef:
ef:77:58:dd:7b:03:b0:e9:5c:0e:b1:ab:f2:ba:3d:
bb:97:be:5d:63:6c:67:29:89:bf:cc:45:04:4b:2b:
3d:b6:97:89:b0:06:c8:89:17:ab:79:27:0f:d2:1a:
48:4e:7e:26:d7:66:5a:e9:b7:f6:c9:e5:7e:0d:4b:
fa:64:05:89:5c:2b:29:7f:00:5f:80:65:1e:83:ec:
43:d8:c1:99:bb:f3:29:7c:80:06:9b:4c:19:aa:67:
09:da:73:17:0a:f3:99:f0:36:46:d0:dd:a2:60:de:
60:c9:b1:22:ad:50:4b:3b:5d:ff:e6:ec:df:c9:bb:
43:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A3:C7:B4:A0:D5:45:90:EC:D6:DD:83:E1:FE:3B:B9:73:24:8D:D2
X509v3 Authority Key Identifier:
keyid:DA:75:41:72:5B:72:8B:5A:89:F3:BF:AF:20:F8:76:55:63:C2:F3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:dd:a5:14:b3:d2:80:a0:00:61:31:bb:cb:2d:83:18:cc:2d:
e7:05:30:f7:aa:88:d9:d5:9e:5e:29:97:0d:f4:e7:8a:93:57:
82:0c:a1:df:e9:6c:81:2c:b6:5e:2e:12:6b:2e:24:09:8f:cc:
88:cc:71:08:6b:ad:86:e0:e0:94:cb:6d:49:7f:2c:2c:5c:9c:
11:55:94:ce:c1:7f:fa:98:9e:60:7c:b5:c7:5c:49:8f:28:2c:
92:fb:ca:ab:6a:06:d2:08:46:1b:33:d5:75:c8:fc:fc:15:9b:
c5:c8:71:2d:0a:cf:f8:61:22:87:f6:e7:65:22:4d:f9:9b:27:
fe:ec:60:79:8f:3a:dd:f7:01:df:e2:7d:b4:18:84:37:55:03:
24:53:5b:2c:11:e4:89:34:9d:d7:18:17:b2:25:06:6a:b1:83:
43:09:12:ca:a4:f6:48:25:8b:7f:8e:4f:71:94:c2:e9:6c:3c:
c7:52:32:57:93:02:0e:91:49:b4:ce:50:7e:0d:da:8c:7f:88:
32:8a:a3:65:fe:4b:fd:68:80:75:26:96:ff:c7:d5:0b:aa:05:
0b:57:f7:c7:94:6b:6d:ab:9d:c9:02:dd:98:86:7b:05:45:d5:
15:46:46:d3:76:08:73:4b:82:89:65:3b:ee:32:81:da:50:79:
a8:8b:04:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:59 2026 by rpki-client